[asterisk-users] Caller ID Spoofing to be banned in the USA

[J. Oquendo]

Andrew Joakimsen wrote:
> The Proposed bill S704 reads "It shall be unlawful for any person 
> within the United States, in connection with any telecommunications 
> service or IP-enabled voice service, to cause any caller 
> identification service to transmit misleading or inaccurate caller 
> identification information,"
>
> Please tell me how you can construe making a call with the the CID of 
> a number in your control to be "Misleading or inaccurate"


You're answering your own question. Forwarding a call with a number
that is not the originating number is what (drum roll)

a) accurate
b) inaccurate

If you answered b then see me off-list for your scooby snack. As for
possible scenarios, hows this one for size, you change your CID to
reflect 1-800-MASTERCARD call around and fish for information:

"This is John with MASTERCARD services, there's been fraudulent
activity on your card and we've suspended it until we can confirm
your card number..."

And that's all she wrote. I've been up and down this road on the
VoIP security mailing list: http://lists.virus.org/voipsec-0610/threads.html


-- 

====================================================
J. Oquendo
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743
echo infiltrated.net|sed 's/^/sil@/g' 

"Wise men talk because they have something to say;
fools, because they have to say something." -- Plato


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5157 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20070703/7aab5b00/attachment.bin